skysight-inc/HackerNews huggingface dataset:
> the Android security model has taken into account sideloaded apps since the very beginning

Counterpoint: tech websites have literally warned users that they need to be wary of installing apps from inside Google's walled garden.

> With malicious apps infiltrating Play on a regular, often weekly, basis, there’s currently little indication the malicious Android app scourge will be abated. That means it’s up to individual end users to steer clear of apps like Joker. The best advice is to be extremely conservative in the apps that get installed in the first place. A good guiding principle is to choose apps that serve a true purpose and, when possible, choose developers who are known entities. Installed apps that haven’t been used in the past month should be removed unless there’s a good reason to keep them around

https://arstechnica.com/information-technology/2020/09/joker...

"You should not trust apps from inside the walled garden" is not a sign of a superior security model.
We could legislate them out of existence but the legislators are all landlords.

Basically the source of so many problems.
LoRaWAN
SEC is a joke. Either nothing will happen at all OR they will get hit with a small fine.
ChatGPT is offered by the for profit arm of the company. The relative success of that product with respect to it being profitable is irrelevant to it being for profit.
I imagine 34 days is so that you have enough to budget around an entire month. Would be shitty to setup a budget and not be able to follow it for a whole month.
No. It is not about cost at all. Traffic engineers will routinely spend money installing guard rails to save drivers. It's actually much crazier, but you will find it hard to believe.

Traffic engineers are against bollards because they reduce _driver_ safety, and increase damage to cars that lose control. Traffic engineers consider the sidewalk a buffer zone for cars. Notice that the guard rails are outside the sidewalk next time you go for a stroll.

You'll also notice that street lights, and other utility poles are now mounted with breakaway bolts so they sheer off rather that kill drivers. The fact that they might protect a pedestrian is considered a minor point.
Depending on the product, your trial may cost the company a decent amount of money. For example audiobooks are rather expensive to stream (due to publisher pricing, not bandwidth).
Adobe requires annual commit and true up!

Even with large relationships, they refuse to provide utilization metrics. So our team has to implement obnoxious processes to validate your use, or pay 15-25% more than we need to.
I wish you wouldn't do that, you end up hurting regular developers more.
How about the replies to my other comment here, accusing me of being white, and white people of being the problem?

https://news.ycombinator.com/item?id=40269870
It sounds like some variety of stackable Nates. Like a Weighted Companion Cube but named Nate.
BeyondCompare does this too, and even though I’ve purchased a license I have some machines where I haven’t activated it in almost a year of infrequent usage :)
Yes, but that also spends an order of magnitude less on money and energy, so it's not going to get you on HN. Neat parlor trick, though.
Monocultures have a multiplying effect on this, and if you really want to avoid problems you also have to worry about closely related plants.

If you avoid monocropping cherries by mixing four different stone fruits, you don’t achieve much. And apples are rosaceae, as are many many other plants, and a lot of pathogens can hop between them.

And every common garden invertebrate loves to nom on fabaceae.
Personally, I find it deeply troubling that we've come so far along the "free-trade" axis that companies are presumed immoral by default. There is no way to have a high-functioning society when one large part is actively undermining the social contract of society.

That the general public sees this as fait-accompli and seems to be cheering it on is not funny, it's tragic.
The thing is, I often get called away from whatever I was trying to do, and just don’t revisit it for a few weeks, a month. I opened the software, but never actually used it. I go back to it later, whoops, free trial expired. I think x free uses is a much better way to do it, and I as a software maker don’t really feel like I need to charge someone who only needs my stuff once or twice, the marginal cost to me is 0. If they’re getting professional value out of it, or it’s a big part of their day to day for some other reason, then I think they should pay. They’re much more likely to make demands of me if they’re in that bucket, as well.
Looking forward to AI assistant reformats websites into plain reading mode text.
IMHO some light users should be free - niche users who don't have significant budgets or would be a support burden. Others get enormous value in 5 minutes, have easy budgets for this category of software and should be paying.

I wouldn't be quick to judge either way.
You are exactly the audience being misled by these articles. Apple or Google aren’t secretly screen recording you and couldnt care less about your bank account.
> Marijuana is straight up harm reduction over big tobacco

Not as big of a harm reduction as people not smoking anything, which is where we were heading in the 1990s before marijuana legalization.
I too prioritize pedestrian safety over bad drivers that can't seem to stay on the roadway. Are you suggesting it is just that drivers have the right to make risky choices and inflict the damage on others instead of themselves?
Stop Expecting Tech Companies to Provide 'Consequences' for Criminal Behavior
So violating labour laws is ok as long as you are Amazon. /s
You may be failing to see the woods for the trees. Dunno, not OP.

> I would pay for it *by* the 21st time.

By the 21st time != the 21st time.

By the 21st time == at some point prior to the 21st time. Possibly the 5th or 6th time. Maybe the 10th time. Maybe the 3rd time.
I've had a heck of a time filling out forms on Japanese websites in particular.

Insert name here

No no, roman letters not allowed

No no, katakana are fine but half width only

No no, spaces or separating dots not okay, just ram your first and last together into an unreadable blob

We'll go ahead and clear the entire form out so you can refill it any time you make a mistake.

[edit: formatting]
I’ve quit as well and imo there’s no “quit before,” it’s quit or still doing it.

I respect your opinion but I can’t really take a nicotine addict’s claim that the substance isn’t harmful, when the addict hasn’t actually ever quit the chemical.

Somehow along the way “quit” got subbed in with “vaping but it’s basically the same as quit.” Biggest marketing con the industry has ever pulled.
Ah, the old argument that to end racism we must embrace noble bigotry.
How about ignoring immutable characteristics, period, and picking solely on merit? I love other commenters mentioning removing personal characteristics such as name, gender and race from resumes - spot on.
The theory sounds good but there's a difference between having to sell parts of your portfolio (which is volatile) and never touching the capital because you have blog/YouTube revenue.

A big part of "retirement" is feeling financially secure. I'm sure Pete (MMM) practices what he preaches for the savings rate part of FIRE, but when I quit my job, the lumpiness of my investment returns made me very uneasy.

Having a steady stream of income outside of your investments makes the "safe withdrawal rate" part of the theory kinda moot. (By the way, here's some nuance to Bengen's 4% SWR: https://www.youtube.com/watch?v=z7rH7h7ljHg)

Nowadays my FIRE stance has softened to "it's nice to have this pile of capital in case things go wrong" and frugality has always been my nature anyway.
This makes sense to me. To some people, nothing will be sufficient outside of free. The demand curve predicts this. What is weird is that they're talking as if the problem was with every company trying to get paid (paying the bills? that's for the weak), instead of just simply recognizing that their purchasing power is relatively low.
I came here to make the same comment. Not trying to be an ad for Amazon, but if you have Prime, it's currently available there. Well worth watching if you have any interest in this time period, submarines or Charlie Stross. ( The Charlie Stross reference comes from Project Azorian being the backdrop of his novel, The Jennifer Morgue https://search.worldcat.org/title/680284711 ).
Transport routinely install expensive guard rails to save drivers. Their opposition to bollards is not cost -- it is because they are a Dangerous Fixed Object that endangers drivers that leave the roadway.
My bet is most of these long lived businesses also maintain a large pile of gold, which is a fantastic multi generational store of value.

But yeah, cash is really just a call on the local monopoly on violence, which changes all the time over the long arc of history. Terrible long term store of value.
> I guess there are people who still believe the mind is some mystical thing not determined by biology

There's a gap between accepting that the mind is ultimately made up of neurons firing and what it feels like to be a mind made up of neurons firing.

Depending on one's upbringing, they likely hold deep unexamined beliefs - bedrocks of thinking - that more or less boil down to: the mind feels like some mystical thing. People can believe in the science of biology and conceptually understand that they're the product of long spans of evolution while still feeling like the mind is quite a mystical and mysterious thing.

And it can be hard to cut through this feeling without intentionally uprooting those unexamined beliefs. I know this from personal experience. My upbringing involved the deep conditioning of a religious world view that instills these mystical ideas. I left it behind in my late teens. It wasn't until my mid 30s that I started to deeply appreciate how embedded those feelings were, and even though I didn't believe them when examining them rationally, I realized they were still there in my underlying thought processes, influencing my interpretation of everyday things.

So I wouldn't say it's just that people "still believe the mind is some mystical thing" (although this group does exist), but that "the default mode of experience for many people is the one that feels mystical".
Using BlackHole also fixes any awful audio popping in Rosetta/legacy apps, since Apple can't seem to figure that out.
Stack Overflow signs deal with OpenAI to supply data to its models
This likely won't work in the way you expect, SO is similar to wikipedia in that it retains all edits and allows other highly ranked users to edit your answers, additionally, there are already many snapshots of your answer that were fed into all the various AIs so all you'd be doing now is hurting new developers who are attempting to solve the issue you answered.
Literally one page into the article there is the full stack trace that makes abundantly clear there is no such thing going on, they just added a bunch of overhead.

That's despite OSX having a vDSO style mechanism for it: https://github.com/opensource-apple/xnu/blob/master/libsysca...
A) You don't need to buy the software for every employee at once. Why not buy it for a dozen and try it? If it's good you get more licenses.

B) You can buy software and evaluate and decide not to use it and cancel the license.
With the closed system, you have no idea what Apple or Google is seeing.

I think you have the 'inaccurate bits of conventional wisdom' reversed. People have a pretty good idea of what Apple and Google see and banking on your iPhone is safer than driving to the bank.
I think most consumers would agree that this is the fairest model. If I pay for 30 days of Netflix, only charge me for the days I watch so then I feel like I'm using my entire purchase.

The current SaaS model is like going to the store and you can only buy 5 gallons of butter or milk and you have one week to use it. It "feels" like most of your money is being "wasted". At least that's my perception.
It's worth noting that the drivers are still in the mainline Linux kernel and many other distros. If they have a problem it's not just Alma vs the world to figure out the issues - it will be Alma plus the world working on the solution.
SpringBoot OAuth2.0 Social Login
You're getting hung up on an irrelevant detail and missing the point. The point is that one will still have bills to pay even after they don't have a job. That is not a US-only problem, that is a human existence problem.
Show HN: SOTA Stream – daily research papers tailored to your interests
There's too much noise when trying to keep up with AI research these days on Twitter. I wanted something that could help me stay off the site but still keep me up to speed on AI.

I built a very simple prototype for a research paper digest that lets you specify your research interests and delivers a list of papers most relevant to you, daily. It's currently free as I'm funding the API costs myself.
What do you think you offer to society? Are you not just profiteering off a basic human need, only enabled to do so because so many politicians and their mates own property?
> I do not understand how supporting Ukraine can lead to more suffering

You're not responding to the right question at all. You're being asked about the Westerns media not covering the difficulties, losses, and bleak future of the war - justified it seems by the need to support Ukraine.
Germany for sure. Even speaking to some "locals" last year, they're completely unconcerned with Russian aggression, as long as it wouldn't affect their daily lives.

Marcon, at least, seems to get it though? I thought the words about the "end of abundance" were fairly spot on, though it does seem like he's pushing the ship himself.
We use ML and DL systems as a component to our products, but we don't use AI-based tools as part of our development process. Devs are free to use AI-based tools as part of their workflow if they wish, but after a period of experimentation, almost nobody does.
Chrome tried this with attestation and it backfired, one can hope the community can pressure lawmakers to prevent corporations from preventing people to own their computers.

(The pessimist in me laughs maniacally at the optimist in me who wrote it.)
Unauthorized doesn't mean it isn't in the public domain. It means there was no authorization.
Access to human-mobility data is essential for building a sustainable future
Coral is an open-source next.js powered app with pre-built components for enterprise RAG applications and generative images. Integrates with Local LLMs, Langchain retrievers (for things like Wikipedia), and is extensible to your own docs and information sources. Here's a video on getting started.
All I can say to this is "prove it".

If on Linux or a BSD, people can analyze what is happening by inspecting packets, seeing what is saved and being sent on the system. That cannot be fully done on phones.
Idk, I’d pretty happily pay $0.50 to use an infrequently used utility once, if it was totally effortless. But everything wants like $20-30, or even worse, to lock me into some monthly subscription.
I'm talking about internal energy per mass of air, not per volume. Sorry that wasn't clear.
This has been my single major frustration with academia. Papers are getting long and complex (and very often unnecessarily so) and reviewers like rejecting with "not innovative" or "too little work".

I mean there is a great amount of actual work where the complexity is inevitable, say homomorphic encryption or zero-knowledge proofs, but they are based on solid foundations, starting with the definition of group theory with just four axioms and building up and so on, where every definition is either simple or has lots of uses elsewhere. In contrast, in machine learning and operating systems research, people just seem to like to build algorithms from scratch and make it look incredibly complex (whether it actually is complex) and that just makes my life harder just to read the paper. It's getting close to the point where reading the paper takes more cognitive load than conducting the research myself (having to understand 100s of papers to find the one that's useful for my case). When it does, what would be the point of publishing it?

I recognize there is a lot of useful work in academia but it's really hard to enjoy doing it when the results you would be most proud of is not likely to be well recognized.
You're being very disrespectful in this conversation. I was GP has provided links and references when they made their comment, but they are certainly correct. The way the conflict is covered in US media makes it seem like Ukraine is wily superhero making good progress against the bumbling Russians. This does not reflect the current reality or future prospects in the conflict.
Ongoing discussion [0] (140 points, 3 hours ago, 128 comments)

[0]: https://news.ycombinator.com/item?id=40274371
The amount of free “capital” (if you will) for maintaining life that you get on Earth is truly enormous. The mind strains to imagine the costs of building and maintaining all that somewhere that has almost none of it, and is very far from Earth.

Other planets are… kind super-duper terrible. Space itself is even worse.
There is a filter on the plant list for pet-safe! Look for the paw icon. Haven’t pulled this info onto the plant detail page yet though.
It depends on what the purpose was. If it was to increase Windows market presence, which was suffering from security issues, then sure.

If it was to make the software "so fundamentally secure that customers never even worry about it" then no, it didn't.
This x 10
No, it's definitely not duplicitous, and is standard practice across the industry.

It boils down to "we're not claiming to own the rights to your content -- you still retain those -- but we need a grant of permission from you to ensure that we can publish it on our own site without facing possible liability".
> Russia would not have invaded if [...]

> Ukraine did not have ethnic Russians that were being oppressed (see the Odessa union house massacre)

This has ceased being a valid casus belli in the developed world since 1945.

Annexation of a neighboring state's territory isn't justified by purported ethnic persecution.

Not least, because it's historically been the most common manufactured lie to justify war.

> Ukraine did not want to go NATO

Since when does Russia get a say in other sovereign countries' decisions?

Last I checked at the UN, Russia (and China) were big supporters of countries' ability to do whatever they wanted within their own borders (external complaints be damned).

> Ukraine was not a safe haven of anti-Russia fascists

> anti-Russia

Hard to forget the 4 million Ukrainians the USSR purposefully killed during the Holodomor. [0]

When a country does something to an ethnic group that ranks with the Holocaust, it shouldn't be surprised when people are anti-it.

>> fascism: a political philosophy, movement, or regime (such as that of the Fascisti) that exalts nation and often race above the individual and that stands for a centralized autocratic government headed by a dictatorial leader, severe economic and social regimentation, and forcible suppression of opposition [1]

> exalts nation and often race above the individual

How's the glorification of Russkiy Mir going? Or the vilification of non-Russian ethnic minorities?

> stands for a centralized autocratic government headed by a dictatorial leader

How long has Putin been president or prime minister?

> severe economic and social regimentation

How many state-owned enterprises are there in Russia?

And what inalienable freedom of speech and association rights do Russian citizen have?

> forcible suppression of opposition

How many opposition candidates ran in the last election?

If Russia is looking for fascism, it might want to start with a mirror.

[0] https://en.m.wikipedia.org/wiki/Holodomor

[1] https://www.merriam-webster.com/dictionary/fascism
https://stackoverflow.com/questions/58339165/why-can-a-t-be-...
It's bizarre how many people think that offering free trials doesn't cost the company real money. Especially with a SaaS your trial will be a real bill for someone else.
You should include the year when posting a three year old article like this or it becomes inadvertent clickbait.
There's a place for both, yes! I think Hacker Search should offer each (https://news.ycombinator.com/item?id=40241332) and ideally intelligently figuring out what to do based on your query.
This would have to be for Meltdown not Spectre. Spectre is in process and meltdown is cross-process. In process would be pointless for a language like swift.

And it’s a weird mitigation because Meltdown afaik has been mitigated on other OSes without banning high res timers.

The nail in the coffin is that it’s unlikely about security is Date and clock_get_time are accessible and an order of magnitude faster.

This seems a more likely scenario of poorly profiled abstraction layers adding features without measuring the performance.
Linux 6.10 to Drop Support for Old Dec Alpha Hardware
I took a job working at a company that made a code obfuscator/minimizer in the days before CI/CD really existed. I knew a lot about Java internals so I thought this would be good. First day I got assigned instead to an embedded Java project.

Why? They couldn’t market the obfuscator, so they were winding it down. People didn’t want a license for something they used for ten minutes four times a year.

(We did later hire an intern to fix bugs in the obfuscator. The app was constrained to a specific JAR size, and those gave us enough headroom for about another dozen features. And I made a change late in the project that got me space for two more, via suffix sorting the constant pool instead of prefix sorting it).
It's part of the agreement that the user accepts to use the service, and there are frameworks in place that already implement cross-jurisdictional reciprocity for things like copyright licenses.
> during war

The United States's last declaration of war was 83 years ago. Since then it's been all "police actions" or some such. What meaning does "during war" carry in the world of today?
Nice… now let’s do it in bash
This feels similar to the Anti-Virus programs of old, maybe the solution is the same, Microsoft adds some sensible shim layer that can attest that you're not doing weird things that cheaters would do.

People are happy enough that it's MSFT code in the kernel and not some random game dev studio, game dev studio is happy because it has fewer cheaters.

Or, alternatively, go play a different game, there's a fair few to choose from.
I think this is about Crunchy Bridge, a postgres SaaS? This link lacks a lot of context.
Yeah, freemium with a free tier that’s useful for casual use converts me way more often than time-based trials.
The process is a combination of things. right now most of the work is done by a massive regex. I also do some manual labeling. Exploring some other solutions too. But accurate mappings are a high priority for the site!
Any idea what this could mean for those holding crypto on Robinhood?
Self control and disposable income are mutually exclusive?
> code is not the easy part, it's only the part where you can probably escape accountability

This is such a huge factor in how software is built in today's world.
glad to see the same regulatory agency that snored through the gamestop fiasco has suddenly taken notice of the crypto wing of the same predatory fintech that should have faced a congressional hearing years ago.
Buy her Android
It’s true I spend a lot when I go, but then I don’t go to the normally grocery for weeks. I think it’s a net positive in money and time.
as a German, I approve, we absolutely have to know where everybody is at any time, esp. when they gather to protest the climate saving legislation.
Or better yet make the switch to Linux. The steam deck really changed the gaming atmosphere.